syspatch is a utility to fetch, verify,
install and revert OpenBSD binary patches.

When run without any options, syspatch will
apply all missing patches, creating a rollback
tarball containing the files it is about to replace, then extracting and
installing all files contained in the syspatch tarball. Patches are cumulative
and as such it is not possible to install only a subset of them.